Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft
File: 2O6yCogM20lOnmLUOy7yjJDLnu8.mft (raw, json)
Hash identifier: 68nfBfdG2IwSpfTC0iGR6JAHGc+75BcGm41U6D0dHTk=
Subject key identifier: C1:1C:3C:8A:26:34:6B:C0:97:E7:03:14:35:BB:BA:3B:A5:BC:5D:02
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Certificate issuer: /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial: 0196AB7A758B6094B251C16CBBC4273E7F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft
Manifest number: 0428
Signing time: Wed 07 May 2025 16:00:51 +0000
Manifest this update: Wed 07 May 2025 16:00:51 +0000
Manifest next update: Thu 08 May 2025 16:00:51 +0000
Files and hashes: 1: 2O6yCogM20lOnmLUOy7yjJDLnu8.crl (hash: o7vvvIcokraK1uR0K8mebKxOeNWmY1aVBXY34q46axU=)
2: vCMAQMWIPZtWaDRHudCKdYaPL5w.roa (hash: K6MAg/QPc/fQfWH2rJi0K6eyKZU04FRZSEew4e4aMTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:7a:75:8b:60:94:b2:51:c1:6c:bb:c4:27:3e:7f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Validity
Not Before: May 7 16:00:51 2025 GMT
Not After : May 8 16:00:51 2025 GMT
Subject: CN=c11c3c8a26346bc097e7031435bbba3ba5bc5d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:80:b7:3b:5c:b7:94:e5:6c:20:a5:a0:65:
83:5a:b9:0f:4d:ac:01:26:37:8a:9d:b4:67:79:6b:
cb:ed:cd:5c:3c:87:0b:50:00:41:f8:4b:85:69:99:
06:1c:c8:51:06:c5:64:62:2a:82:67:43:61:dc:bc:
c2:ce:0d:d7:83:ac:34:06:e9:4f:be:48:6a:25:83:
52:03:b0:13:7f:ed:d6:2f:d8:57:5e:6a:da:da:fc:
b1:83:1a:cf:30:9c:01:76:98:69:b0:14:ff:65:77:
92:4d:e8:88:7e:96:34:ac:47:25:84:4d:f0:3e:07:
ba:89:8e:25:c9:39:a2:04:2f:51:62:77:20:bf:23:
7e:f8:90:b8:f9:30:9b:06:fd:e9:af:73:16:22:60:
d8:69:2b:69:e2:14:7d:86:40:a6:d0:b6:fd:b3:9f:
d6:4e:29:e5:1d:58:0e:ed:13:20:61:a0:90:aa:33:
3a:74:54:35:cd:bf:71:03:8c:41:23:39:c2:9d:99:
c3:bd:1a:99:dd:d2:3d:a4:97:b7:5a:fa:cc:9d:ec:
3e:c3:5c:1a:99:c5:1e:d4:62:41:b2:9d:a0:58:38:
bd:2b:35:80:bc:9e:0a:2f:41:43:fa:8a:c7:0c:1e:
3a:4c:6a:43:b6:97:86:23:26:bd:8e:d2:02:09:c6:
03:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1C:3C:8A:26:34:6B:C0:97:E7:03:14:35:BB:BA:3B:A5:BC:5D:02
X509v3 Authority Key Identifier:
keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:a9:bc:b6:28:01:46:ba:a3:af:d4:e3:13:04:2a:2b:ba:ea:
aa:fc:98:0f:0f:ad:85:fb:2c:68:7e:24:9f:b3:32:39:6c:a2:
35:b0:e0:ac:02:7b:e2:93:78:a6:12:2b:71:5b:16:45:88:ee:
b9:3b:01:a1:6d:2b:9f:18:3b:b0:b6:79:9d:fe:99:af:85:7d:
a9:bd:91:a6:21:2c:b8:21:46:20:fb:d7:b9:28:0c:9e:1d:a6:
b8:dc:03:58:92:87:d6:82:ac:b7:d5:cc:ea:db:fb:a2:31:fe:
98:13:83:2c:52:d1:27:c0:03:c9:3e:8d:3a:07:23:e3:9e:4a:
59:fb:e0:61:b6:81:0f:f4:8f:1e:ee:7d:bd:ba:70:b2:93:88:
7d:9a:c0:ae:10:df:bb:f2:db:2d:40:97:f3:69:e2:f7:a1:38:
f5:8e:f6:14:bb:1b:08:a0:1c:85:e6:e1:f2:74:9f:45:6b:a2:
c3:82:8b:fe:b2:75:6e:84:e3:20:09:f5:05:3b:3a:48:b5:55:
84:d3:e4:fe:2e:53:b3:86:83:ca:4c:f5:93:58:ee:c1:8f:3e:
82:b4:42:ca:5c:f0:a5:40:73:7d:5d:e9:90:d6:0b:bb:ae:61:
db:4a:1a:e1:d3:42:18:b8:2c:36:49:d0:25:c0:5c:62:1e:90:
4f:f7:c0:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZarenWLYJSyUcFsu8QnPn8BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZWViMjBhODgwY2RiNDk0ZTllNjJkNDNiMmVmMjhjOTBj
YjllZWYwHhcNMjUwNTA3MTYwMDUxWhcNMjUwNTA4MTYwMDUxWjAzMTEwLwYDVQQD
EyhjMTFjM2M4YTI2MzQ2YmMwOTdlNzAzMTQzNWJiYmEzYmE1YmM1ZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ2Atztct5TlbCCloGWDWrkPTawB
JjeKnbRneWvL7c1cPIcLUABB+EuFaZkGHMhRBsVkYiqCZ0Nh3LzCzg3Xg6w0BulP
vkhqJYNSA7ATf+3WL9hXXmra2vyxgxrPMJwBdphpsBT/ZXeSTeiIfpY0rEclhE3w
Pge6iY4lyTmiBC9RYncgvyN++JC4+TCbBv3pr3MWImDYaStp4hR9hkCm0Lb9s5/W
TinlHVgO7RMgYaCQqjM6dFQ1zb9xA4xBIznCnZnDvRqZ3dI9pJe3WvrMnew+w1wa
mcUe1GJBsp2gWDi9KzWAvJ4KL0FD+orHDB46TGpDtpeGIya9jtICCcYDCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEcPIomNGvAl+cDFDW7ujulvF0CMB8GA1UdIwQY
MBaAFNjusgqIDNtJTp5i1Dsu8oyQy57vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk82eUNvZ00yMGxPbm1MVU95N3lqSkRMbnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mZTNkYmUtOTcwOC00MjQyLTkyNzct
OTZiNTBiY2M3YTA4LzEvMk82eUNvZ00yMGxPbm1MVU95N3lqSkRMbnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9mZTNkYmUtOTcwOC00MjQyLTkyNzctOTZiNTBiY2M3YTA4
LzEvMk82eUNvZ00yMGxPbm1MVU95N3lqSkRMbnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3am8tigB
Rrqjr9TjEwQqK7rqqvyYDw+thfssaH4kn7MyOWyiNbDgrAJ74pN4phIrcVsWRYju
uTsBoW0rnxg7sLZ5nf6Zr4V9qb2RpiEsuCFGIPvXuSgMnh2muNwDWJKH1oKst9XM
6tv7ojH+mBODLFLRJ8ADyT6NOgcj455KWfvgYbaBD/SPHu59vbpwspOIfZrArhDf
u/LbLUCX82ni96E49Y72FLsbCKAchebh8nSfRWuiw4KL/rJ1boTjIAn1BTs6SLVV
hNPk/i5Ts4aDykz1k1juwY8+grRCylzwpUBzfV3pkNYLu65h20oa4dNCGLgsNknQ
JcBcYh6QT/fA2g==
-----END CERTIFICATE-----
Generated at Wed May 7 23:02:56 2025 by rpki-client